A supervisory authority which is concerned by the processing of personal data because:
– the controller or processor is established on the territory of the Member State of that supervisory authority;
– data subjects residing in the Member State of that supervisory authority are substantially affected or likely to be substantially affected by the processing; or
– a complaint has been lodged with that supervisory authority.
Source: Regulation 2016/679 (GDPR)
glossary
